Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239981 4.3 警告 ASP indir - Angelo-Emlak の hpz/admin/Default.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2048 2012-06-26 16:02 2008-05-1 Show GitHub Exploit DB Packet Storm
239982 7.5 危険 ASP indir - Angelo-Emlak における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2047 2012-06-26 16:02 2008-05-1 Show GitHub Exploit DB Packet Storm
239983 4.3 警告 cPanel - cPanel におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-2043 2012-06-26 16:02 2008-05-1 Show GitHub Exploit DB Packet Storm
239984 10 危険 EGroupware - eGroupWare における詳細不明な脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2041 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239985 3.5 注意 editeurscripts - EditeurScripts EsContacts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2037 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239986 7.5 危険 dream4 - dream4 Koobi Pro の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2036 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239987 5 警告 acritum - Acritum Femitter Server の FTP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2032 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239988 4.3 警告 F5 Networks - F5 FirePass 4100 SSL VPN の installControl.php3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2030 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239989 6.8 警告 e107.org
webze
opendb
labgab
TorrentFlux
PHPNUKE
my123tkshop
phpmybittorrent		 - Francisco Burzi PHP-Nuke などの製品で使用される CAPTCHA における CAPTCHA 検証を通過する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2020 2012-06-26 16:02 2008-04-29 Show GitHub Exploit DB Packet Storm
239990 7.5 危険 chilkat software - Chilek Content Management System におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2017 2012-06-26 16:02 2008-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
308141 - six_apart movable_type Cross-site scripting (XSS) vulnerability in Movable Type (MT) 3.33, when nofollow is disabled and unmoderated comments are enabled, allows remote attackers to inject arbitrary web script or HTML via … NVD-CWE-Other
CVE-2007-0231 2011-03-8 11:49 2007-01-13 Show GitHub Exploit DB Packet Storm
308142 - poptop pptp_server pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connection tear-down) via (1) GRE packets with out-of-order sequenc… NVD-CWE-Other
CVE-2007-0244 2011-03-8 11:49 2007-05-11 Show GitHub Exploit DB Packet Storm
308143 - apple mac_os_x Integer overflow in the byte_swap_sbin function in bsd/ufs/ufs/ufs_byte_order.c in Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service (kernel panic) by mounting a craf… NVD-CWE-Other
CVE-2007-0299 2011-03-8 11:49 2007-01-17 Show GitHub Exploit DB Packet Storm
308144 - pancake.org zina Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs." NVD-CWE-Other
CVE-2007-0303 2011-03-8 11:49 2007-01-18 Show GitHub Exploit DB Packet Storm
308145 - apple mac_os_x The do_hfs_truncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service (kernel panic) via a crafted HFS+ filesystem in a DMG image, which causes an access of … NVD-CWE-Other
CVE-2007-0318 2011-03-8 11:49 2007-01-18 Show GitHub Exploit DB Packet Storm
308146 - trend_micro client-server-messaging_security
officescan_corporate_edition 		Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-0325 2011-03-8 11:49 2007-02-21 Show GitHub Exploit DB Packet Storm
308147 - trend_micro client-server-messaging_security
officescan_corporate_edition 		Successful exploitation requires that OfficeScan client was installed using web deployment. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-0325 2011-03-8 11:49 2007-02-21 Show GitHub Exploit DB Packet Storm
308148 - trend_micro client-server-messaging_security
officescan_corporate_edition 		The vendor has issued a fix (7.0 Security Patch - Build 1344; 7.3 Security Patch - Build 1241). CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-0325 2011-03-8 11:49 2007-02-21 Show GitHub Exploit DB Packet Storm
308149 - bea weblogic_server BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certifica… NVD-CWE-Other
CVE-2007-0408 2011-03-8 11:49 2007-01-23 Show GitHub Exploit DB Packet Storm
308150 - bea weblogic_server BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users… NVD-CWE-Other
CVE-2007-0409 2011-03-8 11:49 2007-01-23 Show GitHub Exploit DB Packet Storm